A leading financial group began a digital transformation focused on cloud migration and restructuring IT operations. With one of its subsidiaries already operating on Amazon Web Services (AWS), the company decided to align all its subsidiaries with AWS for better performance and smoother operations. The key objective was to migrate their Oracle E-Business Suite (EBS) to AWS, utilizing AWS services to create a more efficient, secure, and easily manageable IT infrastructure.
Challenge: Cloud Infrastructure
The financial group faced the challenge of enhancing operational efficiency across its subsidiaries by migrating applications to the cloud. This required a cloud transformation that would enable all its subsidiaries, which were already operating independently, to benefit from the efficiencies and innovations of cloud-based services. The migration was not just a simple lift-and-shift. Instead, it involved rebuilding and provisioning new infrastructure in AWS. This approach ensured the subsidiaries’ Oracle EBS systems could seamlessly integrate into the parent organization’s AWS environment.
Having already successfully migrated to AWS, the holding company recognized the potential operational benefits, such as enhanced performance, scalability, and innovation. This success led to the decision to expand AWS adoption to all their subsidiaries. Since each subsidiary managed its own Oracle EBS account, it was important to standardize and govern these accounts to maintain consistency and control. To accomplish this, standard templates were created for each subsidiary to follow. These templates were managed through the AWS Service Catalog and AWS Control Tower to ensure consistency.
Solution: AWS Cloud Services for Governance and Security
To address this challenge, AWS Control Tower was deployed to manage the organization’s multi-account environment. To ensure consistency, CDT uses a landing zone to create a solid and automated AWS environment for each subsidiary’s cloud adoption.
Due to the handling of transactional data, it is crucial to ensure the security of applications. To address this, the organization implemented several key AWS security tools. The AWS Web Application Firewall (WAF) was deployed to guard against common web vulnerabilities and attacks, providing an essential layer of defense for the applications. Encryption at rest was utilized to protect sensitive data stored in the cloud, ensuring that data remains secure even when stored.
AWS Certificate Manager (ACM) was also used to manage SSL certificates, facilitating secure communication between users and servers. For enhanced security monitoring and threat detection, AWS GuardDuty and CloudTrail were integrated. GuardDuty continuously monitors for malicious activity, while CloudTrail provides detailed logs of account activity, enabling better visibility and response to potential threats, even with internal-only application access.
Operational and Business Benefits
The migration and restructuring resulted in significant operational improvements. By centralizing Oracle EBS on AWS, the business gained the ability to manage its systems remotely and efficiently, without the concerns tied to on-premises data center issues.
For the organization, this was a new experience. With AWS Control Tower, managing multiple accounts and their governance became much simpler. In contrast to the on-premises approach, where each account had to be manually managed, Control Tower introduced automation, greatly reducing the complexity of account management and governance.
The most notable benefits were operational. Issues could now be resolved remotely from anywhere, without worrying about the physical data center. Moreover, the business reported smoother day-to-day operations, which not only ensured continuity but also provided the flexibility needed to innovate and stay agile.
The company plans to enhance security and protect sensitive data by adopting global compliance standards like PCI DSS and ISO PDP. To support this, they will implement AWS Security Hub, which will continuously monitor for potential risks and ensure compliance with best practices. By integrating AWS Security Hub, the company will streamline security management, gain centralized visibility into security metrics and proactively address vulnerabilities across its cloud infrastructure.
Migration with CDT
Central Data Technology (CDT), as an AWS Advanced Partner in Indonesia, conducts Security Risk Assessments (SRA) to help organizations identify potential security vulnerabilities and recommend steps to enhance the security of their AWS environments. These regular assessments ensure that cloud infrastructure remains secure, scalable, and compliant, enabling businesses to continue innovating and operating efficiently.
Through AWS Control Tower and Landing Zone, combined with SRA, organizations can easily standardize processes, automate governance, and reduce manual workloads. This is particularly vital in the financial sector, where strict security and regulatory compliance are essential. By implementing AWS security tools such as Web Application Firewall (WAF), encryption at rest, AWS Certificate Manager (ACM), GuardDuty and CloudTrail, businesses can strengthen their data protection while continuously monitoring for potential threats.
Migrating to AWS with CDT’s support allows organizations to build a centralized infrastructure that simplifies multi-account management and ensures top-tier security and compliance. Additionally, AWS enhances operational efficiency, setting the foundation for future growth and innovation.
